Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JS2QLKSTi8QOFRWsZhZil-MI1zk.roa
File: JS2QLKSTi8QOFRWsZhZil-MI1zk.roa (raw, json)
Hash identifier: pO0/dnopnQ8cS8uUcVje2VHHlaIwFAI0mRi6S40+miM=
Subject key identifier: 25:2D:90:2C:A4:93:8B:C4:0E:15:15:AC:66:16:62:97:E3:08:D7:39
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F236902FC054DE131C23C0DC26A389CDD
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JS2QLKSTi8QOFRWsZhZil-MI1zk.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48590
IP address blocks: 194.209.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:02:fc:05:4d:e1:31:c2:3c:0d:c2:6a:38:9c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=252d902ca4938bc40e1515ac66166297e308d739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7f:97:0d:d6:dd:2b:0e:3a:09:ad:4f:5b:5d:
32:04:16:a9:9d:2b:71:a8:f5:6c:0b:41:a1:44:6d:
9c:14:db:e9:91:5c:9b:0b:8d:35:97:48:c2:e4:4c:
a7:96:7a:f1:9e:5f:39:7f:cc:6c:14:6e:16:9f:91:
9d:f8:b8:10:be:a0:16:d7:7a:32:25:69:3e:e4:11:
13:87:08:1e:5d:d7:8d:54:e9:68:2f:9d:a7:b4:06:
b5:f2:f8:ca:80:2f:dc:2f:e4:66:a8:03:f7:65:b3:
89:16:cd:a7:89:4f:96:b9:3f:72:f3:69:4e:4b:2e:
59:3e:6d:3a:ea:ff:8c:86:59:9e:37:31:fd:49:df:
3c:b6:c6:1e:54:1e:4d:f8:10:1c:a6:11:bf:85:db:
46:77:77:20:26:77:26:63:8f:62:7e:c6:ce:ea:33:
dd:4b:97:20:7b:4b:0c:5b:6e:cf:cf:f1:9b:25:f8:
25:f9:c5:a0:c8:6e:c3:b4:ec:21:1d:38:9a:b7:02:
9e:7b:9d:50:1f:cb:3c:d6:e9:d4:84:2f:eb:d2:47:
c3:af:44:6a:78:c4:ed:84:3f:58:02:5c:36:93:f1:
0d:4c:7d:95:3f:b7:0d:e7:78:53:eb:87:f1:a1:0d:
d2:be:72:be:df:52:d4:26:43:4f:01:0f:5e:05:bc:
9b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2D:90:2C:A4:93:8B:C4:0E:15:15:AC:66:16:62:97:E3:08:D7:39
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JS2QLKSTi8QOFRWsZhZil-MI1zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.12.0/24
Signature Algorithm: sha256WithRSAEncryption
31:e9:d9:5e:49:b1:ed:0d:83:98:2b:fd:f0:6b:84:1a:76:7b:
65:95:87:e3:f5:f3:4d:de:7b:d3:2c:38:d7:73:15:e8:9b:22:
b6:8a:8a:5c:35:d3:3c:71:4a:d7:00:dd:76:9d:e5:07:d5:a9:
d1:e1:be:f2:f7:1a:91:ab:be:0b:4c:97:63:b7:48:17:74:e8:
40:d7:9a:41:e6:03:f0:ab:41:15:ba:53:52:9a:41:4c:c2:2e:
60:6c:98:7d:5c:4f:79:9c:74:fd:7e:40:24:8e:86:78:e7:19:
39:a3:ef:ec:07:46:76:f8:bb:ce:3e:a1:6f:e7:6e:51:84:1f:
62:ea:e3:94:00:8b:94:a4:b7:34:93:cc:39:40:68:9d:6a:02:
2c:a8:62:e7:2e:a4:10:98:63:5f:ee:c8:e7:20:1a:db:76:a7:
41:e1:24:b9:18:e5:5e:ab:54:6e:33:9b:6f:b5:bb:1d:29:72:
7e:91:57:38:c6:14:34:d8:47:b4:ce:a3:4e:a9:43:44:e8:6d:
25:d7:f2:0d:0a:eb:b2:d6:7f:07:40:2b:f6:e0:8c:6a:01:cc:
a3:32:8a:4e:fa:10:c7:a7:f8:d6:47:4f:61:73:70:af:cc:20:
22:a2:19:ab:ce:c2:25:f9:2c:19:48:fa:8a:65:dd:13:fc:58:
31:07:59:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:52:41 2026 by rpki-client